CVE-2015-8020: Infoleak

Published Jan 11, 2017

Updated

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure.

Affected Software

3 affected components

NetApp Clustered Data ONTAP=8.0

NetApp Clustered Data ONTAP=8.3.1

NetApp Clustered Data ONTAP=8.3.2

Remediation

Patch Available

https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US

Event History

Jan 11, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What types of systems are affected by CVE-2015-8020?

CVE-2015-8020 affects Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2.

What is the main issue related to CVE-2015-8020?

The main issue related to CVE-2015-8020 is the presence of a default privileged account that may allow unauthorized information disclosure under certain conditions.

What steps can be taken to mitigate CVE-2015-8020?

To mitigate CVE-2015-8020, remove or disable the default privileged account if it is not required for your environment.

Is CVE-2015-8020 considered a high-severity vulnerability?

Yes, CVE-2015-8020 is considered a vulnerability that could lead to significant security risks if exploited.

Are there any patches or updates available for CVE-2015-8020?

Yes, it is recommended to upgrade to the latest version of Clustered Data ONTAP that addresses this vulnerability.